2011
2009
The Problem With HTTPS SSL Runs Deeper Than MD5
To move forward, we first need to acknowledge that the current HTTPS SSL mechanism is completely broken.
RapidSSL CA - MD5 and detailed info about the problem
Not all CAs using MD5 are automaticaly broken [...] Only with these 4 things in place it was possible to pull this off.
1
(3 marks)